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Foreword 


The Financial Management Capability Model described in this document is the result of a study, carried 
out over two years, by our Office. For a number of reasons, the Model deserves your attention: 


First, it complements and reinforces the Treasury Board Secretariat’s initiative to introduce modern ideas 
of comptrollership throughout the federal government. Because sound financial management lies at the 
heart of comptrollership, the Model can be extremely useful in helping Deputy Ministers and other 
members of the senior management team to meet their responsibilities relating to implementing 
comptrollership principles in their organizations. 


Second, my staff will be using the Financial Management Capability Model as the basis for auditing the 
quality of financial management in departments and agencies. Essentially, our criteria for these audits 
flow from the Model. 


Third, I hope that you will see yourselves reflected in some of the financial management capabilities 
described in this report, and that you will see the possibilities for strengthening financial management in 
your organization. 


Ultimately, the key to achieving effective financial management in an organization is a supportive climate 
or culture that is reinforced by appropriate rewards, recognition and sanctions. This includes strong, 
sustained leadership, shared values, and a shared commitment and purpose. Such a climate recognizes the 
important contribution that effective financial management can make to an organization. 


Throughout the study, we sought advice from the financial management community in departments. I 
thank them for their contributions. They helped us to produce a practical tool both for allowing an 
organization to assess where it is — and where it should be — in terms of its financial management 
capabilities and, subsequently, enabling it to reach the appropriate capability level. I believe that you will 
find the Model useful in these respects. 


L. Denis Desautels, FCA 
Auditor General of Canada 
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Introduction 


The need for 
effective 
financial 
management 
has never 
been greater. 


Financial Management Capability Model 


Background 


The environment in which the federal government operates is rapidly 
changing. The effects of limited resources, downsizing and delayering are 
placing greater demands on government services to Canadians; the need for 
effective financial management may be greater than ever. 


A long-standing strategic priority of the Office of the Auditor General 
has been to encourage better financial management in government and improve 
the understanding of the role it can and should play. Accordingly, in 1996 we 
began a study of the current and future financial management requirements of 
federal government departments and agencies. Its ultimate objective was to build 
a modern framework that would describe the key elements departments and 
agencies need to achieve effective financial management — a framework that 
would also provide a basis for assessing the current state of their financial 
management. 


The result, the Financial Management Capability Model presented in this 
document sets out the Office of the Auditor General’s expectations for financial 
management and is the basis on which future audits in this area will be 
conducted. 


Objectives and Scope 


This study focussed on financial management activities in departments 
and agencies. 


In the course of the study we developed: 


» A clear and detailed definition of what we mean when we use the 
term financial management; 

» An audit approach and audit criteria that will permit the Office to 
assess the financial management capability of departments and 
agencies; and 

=» A model that provides those who use it - either as an auditor or as a 
manager performing a self-assessment mode - a systematic method 
that can be used to assess financial management in government and 
provide organizations with a roadmap for improvement 


Approach 


In this document we begin by defining financial management and 
reviewing its objectives. It then presents the Financial Management Capability 
Model that describes the key elements needed for effective financial 
management. 
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We expect that the ideas in this document will evolve as a result of 
lessons learned in the course of applying and using it. 


Financial Management 


Financial 
management 

is an important 
component of 
what managers 
do in delivering 
programs. 


Objectives of Financial Management 


All managers in government are entrusted with public resources to 
deliver programs and services. They have a responsibility to manage those 
resources with prudence and probity and due regard to economy, efficiency and 
effectiveness; they also must account for the way they have used the resources. 


Financial management is an important component of what financial and 
program managers in departments and agencies do in delivering programs and 
services and exercising stewardship over the resources provided to them. 


Essentially, the objectives of financial management are to: 


= ensure that managers have support for decision making; 


= ensure the availability of timely, relevant and reliable information, 
both financial and non-financial; 


= contribute to managing the risks to the organization; 


» help the organization make efficient, effective and economical use of 
resources; 


= enable managers to account for their use of resources; 
» establish a supportive control environment; and 


» enable the organization to comply with authorities and safeguard its 
assets. 


Exhibit 1 elaborates on each of these objectives. 


Defining Financial Management 


Experience has shown that financial management” has almost as many 
meanings as people who use the term. Indeed, the lack of clarity about what the 
term encompasses has probably contributed over the years to the difficulty of 
making progress in this area. Accordingly, we began our study by suggesting a 
definition of financial management in terms of the activities that we believe it 
includes. 


In the private sector, financial management is often thought to include 
two areas of activity frequently covered by the terms “treasury” and 
“comptrollership”. In government, the activities usually associated with the 
treasury function - debt management, investment and corporate budgeting - are 
carried out jointly by central agencies (the Department of Finance, Receiver 
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There are 
three essential 
elements of 
effective 
financial 
management. 
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General and the Treasury Board Secretariat). Our focus here is on only the 
financial management activities carried out by line departments and agencies. 


Exhibit 2 sets out the key elements that constitute financial management 
and shows how they relate to the objectives of financial management. 


Financial Management: Three Essential Elements 


The following are the three essential elements of financial management: 


= Risk management and control. It is essential that an organization 
identify the risks it faces (anything that could interfere with its 
ability to achieve its established objectives); and that it establish a 
framework designed to manage and control those risks. An essential 
part of risk management and control is an environment that 
communicates the purpose, values and ethics of the organization. 


» Information. It is essential that the organization establish procedures 
to manage and protect the integrity of its data and to produce the 


Exhibit 1: Objectives of Financial Management 


Providing support for decision making means that managers have available to them the information and knowledge they need 
to support operational decisions and to understand the financial implications of decisions before they are taken. It also means 
that managers monitor decisions for any potential financial implications and for lessons to be learned from experience, and that 


they can adapt or react as needed. 


Ensuring the availability of timely, relevant and reliable financial and non-financial information means ensuring that 
managers have available the information that forms the basis for calculating financial information or that is used for management 
control and accountability. The information is relevant (useful and understandable); reliable (complete, accurate and authorized); 
and timely. 


Managing risks means that an organization identifies, assesses and considers the consequences of events that could hinder its 
achievement of goals and objectives and/or result in significant loss of resources. Risks that require monitoring and assessing go 
beyond the traditional financial risks. They include the full range of business risks, such as operational and strategic risks as well 
as social, legal, political and environmental risks. 


Making efficient, effective and economical use of resources means ensuring that an organization has enough resources to 
carry out its operations and that it uses these resources with due regard to economy, efficiency and effectiveness. 


Accountability means that an organization understands and can demonstrate how it has used the resources entrusted to it and 
what it has accomplished with them. 


A supportive control environment means the organization has an organizational climate that fosters the achievement of 
financial management objectives — a climate that includes commitment from senior management, shared values and ethics, 
communication and organizational learning. 


Complying with authorities and safeguarding assets means that an organization carries out its transactions in accordance 
with applicable legislation, regulations and executive orders; that spending limits are observed; and that transactions are 
authorized. It also means that an organization has a system of controls over assets, liabilities, revenues and expenditures to 
protect against fraud, financial negligence, violation of financial rules or principles and losses of assets or public money. 


Office of the Auditor General of Canada 


Financial Management Capability Model 


Se 
Cc gy 
404 


| 
USD 


WY y . é Ye 
C7 ESI. COTS a 


IPI 7 
(I. GS. | Cy 
a Nal TQ ZEN 


iN _ 


—VIT) 


“ SWS Z Tees SW 
J Li < .. 


< IY Ye < S U.S 
LV Zs 3c 7 7, GG. 


> 


saomnosay Jo DOReerC rar eee on sjassy Jo 
asf) olUOU0S ; : : JUDLUUOITAUA SUIpIeNsaJes 29 
Aypiqeiunosoy Bee ee jerourulj—uoN uOIsIo9q] jo ae sonmonny qin | Sahai 
quenurg a jeloueuly Joy} yioddng JUSWIOS VURAL souerdi07) 
A < A 
KY - a 
yioddng uors1s9q uOneULIOsU] yIOMOUTLIY 
seue uourosevue ae : juguTaseue yoddn 
en ‘ , Ayyend) A Pug Seay oe ae ae acne aes pue aoa SVAN! ie 
ue sadinosa synsay ould De ene uoneULIOjUy ree as UOTVZIULZIC) 
P a eM a1 91e.$ pue [erouruly ysryl oa SLNSWA1S 


77 


Co 


ue 


\ 


EN zy 


UNDG 


juawabeuey jeloueuly Jo sjuawiayz :Z yQlyxy 


Office of the Auditor General of Canada 


Financial 
management 
works in concert 
with other 
important 
components of 
the organization’s 
management. 


Management is 
responsible both 
for determining 
the appropriate 
financial 
management 
capability and for 
achieving and 
maintaining that 
capability. 
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type of information needed by managers to conduct their business 
and account for their responsibilities. The organization must also 
present this information when it is needed. This element includes 
management of information systems and financial and non-financial 
(operational and program) performance information. 


Management of resources. This component of financial 
management focusses on managing and directing the organization’s 
resources economically and efficiently to achieve corporate 
objectives. It includes strategic planning, analysis and support for 
decisions. 


Clearly, financial management does not exist in isolation. Rather, it _ 
works in concert with other important components of the organization’s 
management. Indeed, these three essential components of financial management 
overlap and relate to the other elements of management. Ultimately, an 
organization must have good management overall before it can have good 
financial management. 


Principles of Financial Management 


A number of principles underlie our Financial Management Capability 


Financial management is an integral component of an effective 
management framework that helps organizations achieve their 
objectives and account for the cost of doing so. 


Management is responsible both for determining the financial 
management capability appropriate to the organization, and for 
establishing the processes and practices needed to achieve and 
maintain that capability. 


Not every organization requires the same financial management 
capability. The appropriate level will be commensurate with the 
nature and complexity of the organization and the risks to which it 
may be exposed. We recognize that “no one size fits all”. 


Financial management activities must be cost-effective. In other 
words, the cost of maintaining controls should be commensurate 
with the risk the controls are intended to address. 


Financial management is the responsibility of everyone in the 
organization. In carrying out their duties, all managers are 
responsible for considering the financial implications of their actions 
- for managing their resources in a cost-effective way. 
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The Financial Management Capability Model 


Background 


The Financial Management Capability Model (FMCM) is based on an 
adaptation of the Software Engineering Institute’s “®Software Capability 
Maturity Model”. The Institute developed the model as a tool for assessing an 
organization’s ability to build software applications. We saw that this approach 
could be used to create a model for assessing the financial management 
capability of government departments. 


The FMCM is a framework that describes the key elements of effective 
financial management. It sets out a path that an organization can follow to 
develop progressively more sophisticated financial management practices, as 
needed. It shows the steps in progressing from a level of financial management 
typical of a start-up organization to the strong, effective, financial management 
capabilities associated with a more mature and complex organization. 


In addition to its use in auditing, the Financial Management Capability 
Model also provides a tool that a government organization can use to: 


= determine its financial management requirements according to the 
nature, complexity and associated risks of its operations; 


= assess its existing financial management capabilities against the 
requirements it has determined; and 

= identify any gaps between those requirements and its existing 
financial management capabilities. Having identified these gaps, an 
organization can then address any significant ones and work toward 
developing the appropriate level of financial management capability. 


Structure of the Financial Management Capability Model 


The Financial Management Capability Model is a framework for 


The Model is a strengthening financial management through many small evolutionary steps. The 
framework for model illustrates the stages through which an organization can evolve as it 
strengthening defines, implements, measures, OLIN) Ss and Improves its financial ee 
fnaneil processes. These steps have been organized into five progressive “capability 

levels”. Each level represents a well-defined stage toward developing a mature 
management. financial management regime. 


The following are the five levels of the Financial Management 
Capability Model (see Exhibit 3). 


» Start-up 

» Control 

» Information 
» Managed 


=» Optimizing 


®CMM and Capability Maturity Model are registered in the U.S. Patent and Trademark Office. 
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Exhibit 3: Financial Management Capability Model 


ae OPTIMIZING 


Focus on continuous 


evens improvement and learning 
MANAGED 


Focus on balancing efficient and economical use of 


resources with quality/effectiveness of results 
achieved 
INFORMATION 


Focus on measuring how resources are used and 
managing for the efficient and economical use of 
resources 


Each capability level consists of a cluster of ’key process areas” (KPAs). 
When an organization has instituted all of the KPAs associated with a given level 
of financial management capability, it may be considered to have achieved that 
level. Note that each KPA has a purpose and one or more goals. Certain activities 
and results or outcomes are also associated with every KPA. Essentially, 
The start-up therefore, KPAs are the main building blocks that determine the financial 
management capability of an organization. They identify what must be in place at 


level is 
f that capability level before the organization can advance to the next level. 

characterized 
by a lack of The Start-Up Level 
sustainable, The Start-up Level describes the financial management characteristics of 
repeatable an organization that has not yet established its key policies and practices or its 
financial control framework. At this level, in the absence of established practices, the 
management organization's ability to achieve its DUSINESs or program objectives depends on 

; the often-isolated efforts and accomplishments of individuals. In these 
practices. 


circumstances there is no certainty that such accomplishments would be 
repeatable or sustainable. 


This situation might exist if an organization has experienced dramatic 
changes in its operations — for example, if it has implemented a new program or 
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The focus of 
the control 
level is on 
compliance, 
control and 
safeguarding 
of assets. 


policy, amalgamated with another department or relocated its operations. If it has 
not effectively managed the increased risks associated with the change, the 
organization could be at the Start-Up Level of financial management capability. 


The lack of repeatable, sustainable practices of financial management 
and control means that any data produced may not be complete, accurate or 
reliable. Similarly, without an adequate control framework in place, assets may 
not be adequately protected or resources adequately controlled. 


The key challenge the organization faces in progressing to Level 2 is to 
develop realistic, useful financial and operational business plans and to establish 
a basic control framework that allows it to monitor and control resources and 
safeguard and protect assets. 


The Start-Up Level, unlike other levels in the Financial Management 
Capability Model, is not a stable environment in which it is desirable to remain. 


The Control Level 


At the Control Level (Level 2), the focus is on ensuring that adequate 
resources are available, assets are safeguarded, data are reliable, and operations 
are monitored and controlled and conducted with prudence and probity. 
Organizations at the Control Level are able to meet statutory and regulatory 
reporting requirements. 


Organizations that have instituted the key process areas for this level 
have established a control framework that provides a stable environment and 
ensures that control practices are repeatable and sustainable. The control 
framework includes financial, operational and management controls. When these 
basic controls are operating as intended, they will help the organization to control 
or reduce risks and to produce complete and accurate financial and operational 
data. 


With sound financial and operational data, the organization can carry out 
its basic stewardship responsibilities and meet its reporting obligations. The 
integrity of the data supports operational planning decisions and monitoring 
activities. It ensures that sufficient funds have been obtained to meet budget and 
cash-flow requirements, and it satisfies statutory and operational reporting 
requirements. 


An organization at the Control Level will be able to answer “Yes” to the 
following key questions: 


» Do we have a control framework to ensure that our assets are 
safeguarded, our data are accurate and reliable, and our operations 
are conducted with prudence and probity? 


= Are transactions processed and controlled in accordance with 
applicable legislative and/or regulatory requirements? 
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The information 
level focusses 

on integrating 
the organization’s 
financial and 
non-financial 
systems. 


Financial Management Capability Model 


The primary activities that the organization’s Finance group performs at 
the Control Level involve the traditional accounting functions - processing 
transactions, bookkeeping and general accounting functions. Finance focusses on 
ensuring that controls over the financial systems are adequate to produce 
complete, accurate and timely financial data and to provide functional guidance 
to operational groups as required. 


At the Control Level, operational managers play a role in achieving basic 
financial management capabilities. This involves establishing realistic financial 
plans based on expected results, and estimating the resources required to achieve 
those results. At Level 2, the data on which these plans are based are typically 
historical in nature, drawn from past experience. At this level, operational 
managers would also track actual progress and resource use against planned 
results. 


At the Control Level, reliable historical data are available. However, they 
are not generally available as “information”. Although ad hoc analysis can be 
carried out, the effort to collect information may be extensive and 
time-consuming because it may be fragmented, scattered and not easily 
accessible. 


The Information Level 


At the Information Level (Level 3), key process areas focus on 
integrating the organization’s financial and non-financial systems, practices and 
procedures to provide information that can be used to manage resources with 
prudence and probity and in an efficient and economical manner. 


At Level 3, an organization will be capable of both measuring and 
managing its risks, and can tailor management practices within its various 
operating units to manage and reduce risk cost-effectively. At Level 3, the 
organization will have information on the cost of producing a product of a given 
quality or delivering a service at a given level. 


A key aspect of Level 3 is the changing role of Finance. The role begins 
to move away from performing only the traditional accounting functions to 
performing as a team player providing valuable support to operational managers. 

Finance works with operational managers to develop a financial structure that 
provides them with cost-effective controls and information which meets their 
day-to-day needs — for example, information on product costs. 


At the Information Level, operational managers have a broader 
understanding of their financial management responsibilities. They also 
recognize their responsibility to contribute to the organization’s financial 
management capabilities. 


Critical to achieving this level of capability is a climate that 
institutionalizes financial management practices throughout the organization's 
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The focus of the 
managed level is 
on the use of 
information to 
understand the 
financial 
implications of 
administrative, 
operational and 
policy choices. 
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culture. This would require that senior management explicitly demand and 
promote effective financial management and demonstrate its value. Such a 
culture is developed by formalizing financial management policies and practices 
across the organization and supplementing them with appropriate training — and a 
system of rewards, recognition and sanctions that reinforces the culture. 


In addition to being able to answer “Yes” to the Control Level questions, 
an organization at the Information Level will be able to answer “Yes” to the 
question, “Do we have the financial management systems, practices and 
information that we need to measure and monitor the cost and quality of our 
outputs and the use of our resources? ?” 


At the Information Level, organizational standards for all processes and 
activities have been established to allow for measurement and comparison 
between similar business units across the organization. These standard financial 
management practices can be tailored to each unit’s nature and unique risks. 


One of the key processes at the Information Level is to provide 
consistent and comparable financial and operational (non-financial) information 
and reports that meet the needs of managers. This information provides a basis 
for developing performance indicators, cost and quality measures and monitoring 
performance, to ensure that intended results are being achieved and to 
demonstrate accountability. 


The Managed Level 


At the Managed Level (Level 4), the organization uses the information 
developed at Level 3 to balance two competing objectives: using its resources 
economically and efficiently, and producing cost-effective results — for example, 
goods or services of acceptable quality. The organization understands the 
financial implications of the choices and trade-offs it makes between these 
objectives. Such information also allows the organization to better account for 
the way that it uses the resources entrusted to it. 


An organization at the Managed Level can better manage its financial 
and operational performance because it has — and uses — the “right” 
information. It has information and analyses on the relative costs of different 
approaches to achieving its objectives. An organization with Level 4 capabilities 
uses that information and impact analyses to make informed decisions on cost 
versus quality and risk versus opportunities, or decisions on levels of service. 


An organization with Level 4 financial management capabilities also has 
mechanisms for measuring the impact of variables such as cost, quality, 
productivity and degree of success in achieving its stated objectives. This 
capability flows from a history of having measured and managed organizational 
performance, which includes, for example: 


= managing the organization’s information and knowledge resources as 
assets, so that information needed to make informed decisions is 


Office of the Auditor General of Canada 


The focus of 
the optimizing 
level is one of 
continuous 
improvement. 
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available (for example, by using simulations, historical trends and 
manipulating variables to see how they affect results); 


defining the relationships among variables that affect cost, quality 
and level of service and understanding how they impact on the 
organization’s desired results; 


using information to make informed choices among competing 
objectives like cost, quality and schedule; 


understanding the financial implications of decisions before making 
them, and monitoring their outcomes; 


using quantitative information to control variances (for example, 
fluctuations or changes) in the organization’s production or service 
delivery processes; and 


using quantitative information to balance among competing business 
line objectives (for example, to reduce cost, increase productivity, 
improve quality, reduce risk, increase opportunities). 


An organization at the Managed Level will be able to answer “Yes” to 
the question, “Do we know what it cost to achieve a given result, and did we 
follow the most cost-effective approach in achieving it?” 


The Optimizing Level 


An organization at the Optimizing Level (Level 5) uses information from 
inside and outside the organization to set and achieve strategic targets or 
objectives for improvement. Achieving these targets enables the organization to 
increase the value of its services or products to clients or consumers. 


Thus, at the Optimizing Level the focus is on continuous improvement. 
The organization uses what it has learned from past experience to identify areas 
for future improvement. This involves: 


developing prospective information to anticipate both internal and 
external changes that may affect the organization’s performance 
(instead of reacting to changes) and making the necessary strategic 
or tactical decisions to manage their effects; 


measuring the organization’s performance against that of others in 
the same industry and setting strategic targets for improvement; 
finding best practices and learning from other organizations 
(benchmarking); and 

finding ways to minimize costs and maximize revenues, and to 
improve the quantity and quality of outputs, by introducing new 
technology or improving existing processes. 


The key question that an organization at the Optimizing Level asks itself 
is, “How can we as an organization improve our performance?” 
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Achieving Capability levels 


Achieving a given capability level involves mastering the key process 
areas associated with it and ensuring that these key processes are institutionalized 
within the organization. 


Mastering Key Process Areas 


An organization can reach a given level or financial management 
capability by mastering all of the key process areas included in that level. 


As illustrated in Exhibit 4, each KPA has certain goals. To achieve the 
goals in one or more key process areas, an organization must carry out certain 
activities. Typical activities include: 


Exhibit 4: Mastering KPA’s - The Building Blocks of Capability Levels 


CAPABILITY 
LEVEL 


Outputs and 
Outcomes 
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= identifying requirements — such as the need for a certain control 

system — and developing plans and procedures to meet them; 

= carrying out those plans and procedures; 

= tracking and monitoring the work being done; and 

= correcting any problems that may arise. 

In turn, these activities produce immediate outputs (for example, a 
control system) or longer-term outcomes (for example, careful management of 
the cost of products or services). Once an organization has done the necessary 
work and achieved the outputs or outcomes associated with a KPA, we can say 
that it has “mastered” that KPA: it has in place a basic building block that 
contributes to reaching a particular capability level. 


Institutionalizing Key Process Areas 


By itself, mastering one or more KPAs is not enough. It is also essential 
to “institutionalize” the KPA and all of the activities associated with mastering it. 
By institutionalizing, we mean weaving the KPA and related activities into the 
fabric or culture of an organization. Only in doing so will the organization make 
the KPA sustainable, repeatable and lasting. 


Institutionalizing the KPA requires the “right” organizational climate. As 
indicated in Exhibit 5, some prerequisites or characteristics of such a climate are: 


=» acommitment to master the KPAs associated with reaching a 
particular capability level; 


= the ability to carry out the necessary activities competently, for 
example, through training and development; 


Exhibit 5: Institutionalizing a Key Process Area 


COMMITMENT 


ACTIVITIES Bis, 


y. 
pr 


MEASUREMENT 
AND ANALYSIS 
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=» ongoing measurement and analysis of activities and progress 
toward goals; and 


= continuous verification to ensure that activities have been carried 
out in accordance with established policies and procedures. 


Such a climate provides the support or foundation for reaching a 
financial management capability level appropriate to the organization. 


Establishing Financial Management Requirements 


We would expect that in determining and establishing the financial 
management capabilities their organization needs, managers would assess the 
nature of their operations and the risks they face. In this context, we consider risk 
to be any factor that may affect the organization’s ability to achieve its 
objectives. Risks are identified through a process of first identifying potential 
hazards, then assessing the consequences to the organization should one occur, 
and finally determining the likelihood of the hazard’s occurrence, given the 
control environment of the organization. Such a process is outlined in Exhibit 6. 


As a first step, senior management would determine the organization’s 
financial management requirements by defining its broad purpose and direction 
and assessing its risks (both financial and non-financial). The purpose of this 
assessment would be to determine three things: 


# what risks the organization faces and which of those must be 
controlled; 


# what financial and non-financial information the organization needs 
to meet internal and external accountability requirements; and 


=» what financial and non-financial information management needs to 
fulfil its operational and policy responsibilities. 


The second step would be for management to establish an overall 
management framework, based on the results of its assessment. This would 
include determining the financial management capabilities the organization 
needs, given the nature of its business and the inherent risks involved. This step 
would involve using the FM Capability Model to: 


» establish the financial management capability the organization needs; 


= assess the organization’s existing capability level; and 


= provide guidance for closing any gap between the required and the 
existing levels of financial management capability. 


Once financial management requirements have been established, 
management would identify any residual risks that exist and assess their 
acceptability. The existence of unacceptable residual risks would require 
management to reconsider its financial management requirements and the 
capabilities needed to meet them. 
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Define Purpose of Organization 
Mission, mandate, objectives 


Nature of Business 


Prepare Business Plan 


Assess Risks 


Identify risks to the organization, including 
financial 


Assess probability of occurrence and likely 
consequence of occurrence 


Develop Management Framework 
Establish overall management framework 


Establish FM requirements (using FMCM*) within 
overall management control framework, e.g.: 


— required FM capability 
— controls, skills and resources to satisfy FM 
requirements 


— FM information and activities to support 
effective accountability 


If Risk 
Not Acceptable 


— linkages between Finance and operational 
results 


Assess Residual Risks 
Identify residual risks and determine if acceptable 
to management 


If Risk Acceptable 


Implement Financial Management Framework 
Oversight controls 
Organizational controls (people, culture, etc.) 
Process specific controls 


Integrated information and advice 


Monitoring and Assessment 


Ensure requirements and capabilities are still in 
balance 


Amend risk analysis, control framework etc. as 
appropriate 


* FMCM = Financial Management Capability Model 
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The third step would be for management to implement the financial 
management framework. This step involves monitoring processes and activities 
to ensure that financial management requirements and existing capabilities are 
still in balance and that they reflect the risks and needs of the organization. Any 
imbalance that this monitoring might reveal would have to be dealt with — for 
example, by modifying the risk analysis or financial management framework, as 
required. 


Auditors of an organization as well as its senior management could use 
the framework outlined in Exhibit 6 to apply the Financial Management 
Capability Model. Auditors could use the Model to assess the audited 
organization’s level of financial management capability relative to its 
requirements. 
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Piéce 2 : Eléments de la gestion financiére 
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